ylaro Privacy Policy

ylaro ("we", "us", "our") operates the online gaming platform accessible at https://ylaro.ws, which is designed and operated primarily for Filipino players. We are committed to protecting the privacy and personal data of every individual who accesses, registers on, or otherwise engages with the ylaro platform.

This Privacy Policy describes the types of personal information ylaro collects from users, the purposes for which that information is processed, the circumstances under which it may be shared, the measures we take to keep it secure, and the rights you have as a data subject under applicable Philippine law.

By creating an Account on ylaro or continuing to use the ylaro platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, you should discontinue use of the platform and may contact ylaro support to request account closure.

ylaro collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include, but are not limited to, the following:

2.1 Identity and Contact Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify that you meet the 21-year minimum age requirement).
• Residential address, including barangay, city or municipality, province, and postal code.
• Email address and mobile phone number.
• Copies of government-issued identification documents submitted during KYC verification (e.g., Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID, voter's ID).

2.2 Financial and Transaction Data

• GCash mobile number or registered PayMaya account identifier.
• Bank account details where BDO, BPI, or Metrobank transfers are used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment channel used.
• Wagering history, including game titles played, bet amounts, and win/loss outcomes (retained for responsible gaming compliance and dispute resolution).

2.3 Technical and Usage Data

• IP address and approximate geolocation derived from IP address.
• Device type, operating system, browser type and version.
• Session data including login timestamps, session duration, and pages visited on the ylaro platform.
• Clickstream data and interaction logs used for platform optimization and fraud detection.

2.4 Communications Data

• Records of communications between you and ylaro customer support, including live chat transcripts, email correspondence, and support ticket content.
• Survey responses or feedback submitted voluntarily through the ylaro platform.

ylaro collects personal data through the following channels and mechanisms:

• Direct Collection — Registration: When you create an ylaro Account, you provide identity and contact data directly through the registration form on the platform.
• Direct Collection — KYC Submission: When ylaro requests identity verification, you upload documentary evidence directly through your Account dashboard or via email to the ylaro verification team.
• Direct Collection — Transactions: Financial data is collected when you initiate a deposit or withdrawal through the ylaro cashier, including the payment details you provide at the time of each transaction.
• Direct Collection — Support Interactions: Communications data is collected whenever you contact ylaro customer support via live chat, email, or any other support channel made available on the platform.
• Automated Collection — Platform Use: Technical and usage data is collected automatically through server logs, session management systems, and analytics tools as you browse and interact with the ylaro platform. This includes cookie-based data collection as described in Section 7.
• Third-Party Sources: In limited circumstances, ylaro may receive data about you from third-party identity verification providers, payment processors, or fraud detection services engaged by ylaro to support its operations. Such third parties are contractually bound to handle your data in compliance with applicable Philippine data protection law.

ylaro uses the personal data it collects exclusively for the following defined purposes. We do not use your data in ways that are incompatible with these stated purposes without first obtaining your consent or as otherwise required by law.

4.1 Account Management and Platform Access

Your identity and contact data is used to create and maintain your ylaro Account, authenticate your identity upon login, and ensure that only you are able to access your Account. This is the foundational processing activity that makes use of the ylaro platform possible.

4.2 Identity Verification and Regulatory Compliance

ylaro is required by applicable Philippine gaming regulations to verify the identity and age of all registered players before permitting real-money gaming activity. Your identity documents are processed for KYC purposes, anti-money laundering (AML) screening, and to confirm that you meet the 21-year minimum age requirement for gambling in the Philippines.

4.3 Payment Processing

Financial data is used to process your deposits into and withdrawals from your ylaro Account wallet via supported Philippine payment channels, including GCash, PayMaya, BDO, BPI, and Metrobank. ylaro uses this data solely to facilitate your transactions and to maintain accurate records of all financial activity on your Account.

4.4 Responsible Gaming

Wagering history and session data are used by ylaro's responsible gaming systems to monitor for indicators of problem gambling behavior, to enforce player-set limits (deposit limits, loss limits, session time limits), and to administer self-exclusion requests. This processing is essential for ylaro's compliance with responsible gaming obligations.

4.5 Fraud Detection and Platform Security

Technical and usage data, including IP addresses, device fingerprints, and session logs, are processed by ylaro's fraud detection systems to identify and prevent unauthorized access, bonus abuse, multi-accounting, money laundering, and other prohibited activities on the platform.

4.6 Customer Support

Communications data is used to respond to your inquiries, resolve disputes, and improve the quality of ylaro's customer support. Support records may be retained for a period consistent with the data retention schedule described in Section 8.

4.7 Marketing Communications (With Consent)

Where you have provided explicit consent, ylaro may use your email address and/or mobile number to send you promotional offers, bonus notifications, and platform updates. You may withdraw consent to marketing communications at any time through your Account settings or by contacting support at [email protected].

4.8 Platform Analytics and Improvement

Aggregated, anonymized usage data is analyzed to understand how players interact with the ylaro platform, identify areas for improvement, optimize game offerings, and enhance the overall user experience. No individually identifiable data is used for this purpose.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, ylaro processes personal data on the following legal bases:

Where ylaro relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your privacy rights and have implemented appropriate safeguards accordingly.

ylaro does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only in the following limited and controlled circumstances:

6.1 Service Providers and Data Processors

ylaro engages trusted third-party service providers to assist in operating the platform. These include payment processing partners (such as the operators of GCash, PayMaya, and banking channels), identity verification providers, fraud detection service operators, cloud infrastructure providers, and customer support technology providers. All such processors are contractually required to process your data only as directed by ylaro and to maintain appropriate security measures consistent with the requirements of the Philippine DPA.

6.2 Regulatory and Law Enforcement Authorities

ylaro may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities where such disclosure is required by law, court order, or valid regulatory directive. ylaro will notify you of such disclosures where it is legally permissible to do so.

6.3 Business Transfers

In the event that ylaro undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquirer maintaining data protection standards consistent with this Privacy Policy.

ylaro uses cookies and similar tracking technologies on the platform to ensure proper functionality, maintain session state, and gather anonymized analytics data. A cookie is a small text file stored on your device by your browser when you visit the ylaro website.

7.1 Types of Cookies Used

• Essential / Strictly Necessary Cookies: These cookies are required for the ylaro platform to function correctly. They manage your login session, maintain your Account state across pages, and support security features such as CSRF protection. You cannot opt out of these cookies while using the platform.
• Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use the ylaro platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used exclusively to improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences and settings (such as language preferences or display settings) to provide a more personalized experience when you return to ylaro.
• Marketing Cookies: Where you have given consent, these cookies may be used to show you relevant promotional content related to ylaro's offerings. These cookies do not track your activity across third-party websites.

7.2 Managing Your Cookie Preferences

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will impair the functionality of the ylaro platform and may prevent you from accessing your Account or completing transactions. For non-essential cookies, you may withdraw consent at any time by adjusting your browser preferences or contacting ylaro support.

ylaro retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention obligations under Philippine law. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with ylaro's data disposal procedures. Where data is anonymized rather than deleted, the anonymized data set no longer constitutes personal data and is not subject to the restrictions of this Privacy Policy.

ylaro implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security practices include, but are not limited to, the following:

• Encryption in Transit: All data transmitted between your browser or device and the ylaro platform is protected using Transport Layer Security (TLS) encryption. This applies to login sessions, payment transactions, and all other data exchanges with the ylaro servers.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records stored on ylaro's servers, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within ylaro's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Secure Payment Processing: Payment transactions on ylaro are processed through certified payment service providers. ylaro does not store full payment card details or complete bank account credentials on its own servers.
• Fraud Monitoring: ylaro operates continuous automated monitoring of Account activity to detect and respond to suspicious access attempts, unauthorized login events, and anomalous transaction patterns.
• Vulnerability Management: ylaro conducts regular security assessments of its platform to identify and remediate vulnerabilities. Security patches are applied in a timely manner in accordance with ylaro's patch management procedures.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ylaro. To exercise any of these rights, contact ylaro's Data Protection Officer at [email protected] with the subject line "Data Privacy Request".

10.1 Right to Be Informed

You have the right to be informed about how ylaro collects, uses, and processes your personal data. This Privacy Policy is the primary mechanism through which ylaro fulfils this obligation. ylaro will notify you of material changes to this policy in advance of those changes taking effect.

10.2 Right of Access

You have the right to request a copy of the personal data ylaro holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the recipients with whom it has been shared. ylaro will respond to verified access requests within a reasonable timeframe not exceeding thirty (30) calendar days.

10.3 Right to Rectification

If any personal data ylaro holds about you is inaccurate, incomplete, or out of date, you have the right to request that it be corrected or updated. You may update certain information directly through your Account settings; for data that cannot be self-updated, contact ylaro support.

10.4 Right to Erasure

You may request that ylaro delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Note that ylaro may be legally required to retain certain data (such as transaction records) for regulatory compliance purposes even following a deletion request.

10.5 Right to Data Portability

Where technically feasible and where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller.

10.6 Right to Object

You have the right to object to the processing of your personal data where ylaro relies on legitimate interests as the legal basis, or where your data is processed for direct marketing purposes. Upon receipt of a valid objection to direct marketing, ylaro will cease processing your data for that purpose without delay.

10.7 Right to Lodge a Complaint

If you believe that ylaro has processed your personal data in a manner that violates the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. ylaro encourages you to contact us first at [email protected] so that we may attempt to resolve your concern directly before escalation to the NPC.

The ylaro platform is strictly intended for individuals who are at least 21 years of age, consistent with Philippine gaming regulations governing the minimum age for participation in casino-style gambling activities. ylaro does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If ylaro discovers or is notified that personal data from an individual under the minimum age has been collected — whether as a result of false information provided at registration or any other circumstance — ylaro will:

1. Immediately suspend the associated Account.
2. Securely delete all personal data collected from the underage individual, to the extent permitted by legal retention obligations.
3. Return any deposited funds to the originating payment method, subject to verification.
4. Report the incident to the appropriate Philippine regulatory authorities where required by law.

If you are a parent or guardian and believe that your child has registered on ylaro, please contact us immediately at [email protected] so that we may take prompt action.

ylaro reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, ylaro will notify registered players by posting a prominent notice on the platform and, where practicable, by sending a notification to the email address associated with your Account.

The updated Privacy Policy will indicate the revised effective date at the top of the document. Your continued use of the ylaro platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and may request Account closure by contacting ylaro support.

ylaro has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact the ylaro DPO using the details below:

• Platform: ylaro (https://ylaro.ws)
• Email: [email protected]
• Subject Line: Data Privacy Request / DPO Inquiry
• Response Time: ylaro aims to acknowledge all privacy-related inquiries within three (3) business days and to provide a substantive response within thirty (30) calendar days.
• Support Hours: Available 24 hours a day, 7 days a week

For complaints that remain unresolved after contact with ylaro's DPO, you may escalate your concern to the National Privacy Commission of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.